Ch17

DennisE · February 12th, 2011, 10:48 AM

Imar,

This is a great book for learning ASP.Net. Thanks for your tremendous effort. Your "how it works" sections are particularly good.

In Chapter 17, we create permissions that deny access to MyProfile if a user is not logged in. If we try to access the page when not logged in, we are re-directed to the login page. How does this redirection happen? So far as I can see, we don't specify what the system should do.

Imar · February 12th, 2011, 10:56 AM

Hi DennisE,

Thank you; good to hear you like the book.

The behavior you're describing is built in the ASP.NET Framework. When you try to access a page you don't have permissions to (determined by the <location /> element in this case, ASP.NET automatically redirects you to the Login.aspx page. You can override the actual Login page (in case your login page is placed in a different folder or has a different name) by setting the loginUrl attribute on the forms element like this:

Code:

<authentication mode="Forms">
  <forms loginUrl="~/SomeFolder/SomePage.aspx" timeout="2880" />
</authentication>

Obviously, in this example, SomePage.aspx does need to exist and contain a Login control.

Hope this helps,

Imar

DennisE · February 12th, 2011, 11:17 AM

That answers my question precisely. Thanks for your insightful reply.

Imar · February 12th, 2011, 11:32 AM

You're welcome.

You may want to take another look at Chapter 16, page 587/588 where this is discussed as well.

Cheers,

Imar